[Feature Request]: don't make ~/.config/YouTube\ Music/config.json world writable - Githubissues

th-ch / youtube-music

YouTube Music Desktop App bundled with custom plugins (and built-in ad blocker / downloader)

https://th-ch.github.io/youtube-music/

MIT License

7.49k stars 457 forks source link

[Feature Request]: don't make ~/.config/YouTube\ Music/config.json world writable #2064

Closed caderobinson closed 2 months ago

caderobinson commented 2 months ago

Preflight Checklist

[X] I use the latest version of YouTube Music (Application).
[X] I have searched the issue tracker for a feature request that matches the one I want to file, without success.

Problem Description

~/.config/YouTube\ Music/config.json created world writable Setting perms to anything other than 666 and launching youtube-music resets perms to 666

Proposed Solution

Don't set perms on files to 666. 644 would be better 600 would be optimal

Alternatives Considered

none

Additional Information

No response

JellyBrick commented 2 months ago

config is managed by electron-store. We can't configure it.